Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
File: XmaBWkYx0OeXwfNm5HvxURXJpPs.mft (raw, json)
Hash identifier: tpzhbj+H++FL9Dhy0taPp7WRdij5LfWK38KdJp6AU4Y=
Subject key identifier: 87:AB:BE:33:72:8D:25:3E:64:1E:BB:20:91:57:00:FA:E4:95:B4:89
Authority key identifier: 5E:66:81:5A:46:31:D0:E7:97:C1:F3:66:E4:7B:F1:51:15:C9:A4:FB
Certificate issuer: /CN=5e66815a4631d0e797c1f366e47bf15115c9a4fb
Certificate serial: 019547B5AEAAD07A0A72BE5AC8A5EFEF7189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
Manifest number: 03CC
Signing time: Thu 27 Feb 2025 14:00:43 +0000
Manifest this update: Thu 27 Feb 2025 14:00:43 +0000
Manifest next update: Fri 28 Feb 2025 14:00:43 +0000
Files and hashes: 1: RcsdF1twYJezgr8yrtMpdKX_i-I.roa (hash: eUwQ3KjdQolC1TEdBZkoGCLFeL0MsnJZDlHFt9oWWQw=)
2: XmaBWkYx0OeXwfNm5HvxURXJpPs.crl (hash: xkBPjA0hIzf5iPfIsJQ+bp4G/Ra40w0ukdz+C5/nthk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:b5:ae:aa:d0:7a:0a:72:be:5a:c8:a5:ef:ef:71:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e66815a4631d0e797c1f366e47bf15115c9a4fb
Validity
Not Before: Feb 27 14:00:43 2025 GMT
Not After : Feb 28 14:00:43 2025 GMT
Subject: CN=87abbe33728d253e641ebb20915700fae495b489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:94:86:39:8a:0c:bc:69:58:52:33:6c:e8:
0d:48:19:4f:8c:79:47:b5:3b:50:00:81:0b:ee:f0:
28:79:ed:37:37:e9:ab:2d:ab:da:d4:d1:b6:e5:d2:
ad:7a:0b:68:12:bb:0b:f9:88:10:d3:7b:32:0e:63:
36:6d:64:ca:51:6f:05:fb:23:bc:3a:50:6a:33:93:
f0:9c:ef:56:96:c8:5c:62:bf:07:74:c1:d8:76:96:
47:9f:41:3b:4b:fd:e2:a3:07:6f:99:32:1f:9d:2a:
e5:59:9b:4e:33:2a:65:21:f4:58:90:4c:57:c6:55:
89:06:a0:0b:82:64:54:51:eb:99:3d:c4:ec:51:3c:
0a:4d:24:06:bd:cc:2f:c1:5b:36:98:2b:3a:15:92:
53:9f:0d:7f:6a:e3:2a:a5:9f:93:69:59:f2:d4:7d:
bb:62:cb:a3:31:1e:b2:df:a3:16:33:58:35:e2:53:
d5:ab:ad:85:26:97:f6:e8:e0:f5:c7:32:93:aa:c8:
eb:c6:32:8e:ec:61:b9:e5:3a:3b:d7:9a:4f:22:42:
24:2e:53:07:fc:89:45:ee:87:7a:5f:d2:8a:76:5b:
9e:14:5d:07:60:cf:29:85:ef:70:ad:9b:3f:37:1d:
31:4b:44:04:fe:aa:38:b0:dd:80:92:34:f9:d1:8a:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AB:BE:33:72:8D:25:3E:64:1E:BB:20:91:57:00:FA:E4:95:B4:89
X509v3 Authority Key Identifier:
keyid:5E:66:81:5A:46:31:D0:E7:97:C1:F3:66:E4:7B:F1:51:15:C9:A4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmaBWkYx0OeXwfNm5HvxURXJpPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/180954-8a43-4acc-8a7b-0aeac670c71e/1/XmaBWkYx0OeXwfNm5HvxURXJpPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:af:a1:a1:67:ca:62:36:22:ac:a4:07:75:f1:ed:11:43:0b:
29:9c:53:cd:df:4b:bb:c7:e4:28:8b:59:ab:d0:a2:12:f3:3a:
1b:96:73:d5:a1:e2:fb:91:00:69:a5:32:39:04:e6:c0:3b:a2:
11:62:34:e9:a1:96:49:8e:17:de:bc:2d:e6:2a:4b:09:5b:ee:
0c:89:31:f0:ec:72:98:dd:8f:e5:ff:a3:19:b2:94:34:84:32:
96:7b:5a:79:38:8d:e0:c3:13:f2:f5:d1:2e:23:fd:0a:c7:bc:
44:41:0e:3f:d3:11:bf:34:79:6b:e3:d1:cf:30:7e:40:a9:ac:
f9:a1:4e:07:c3:77:40:93:f7:df:3f:e2:e7:91:1f:5a:c7:d6:
f5:7b:61:62:a6:85:d3:73:8d:32:d0:0a:3e:84:b5:ed:38:13:
9c:2b:17:49:cd:d2:25:3b:38:81:eb:dd:95:71:91:bc:d5:5b:
39:1b:f5:24:c1:ca:08:c0:2d:ad:2b:0f:5d:e6:5e:ee:42:00:
6c:cc:09:8f:ea:eb:22:06:ea:9d:3c:a6:d1:ff:b2:a2:60:82:
67:14:cd:64:9f:41:c5:26:a8:59:e1:8d:22:4f:6f:e8:62:e0:
c5:e1:c4:5f:30:d8:f6:1c:0c:ec:33:bc:7f:0a:0d:58:72:fc:
38:27:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:54:08 2025 by rpki-client on console.sobornost.net